Hey guys, I posted a thread in relation to Windows update breaking certain things. How do you monitor what it breaks. I administer a domain here at our bank and would like to know what Updates are breaking what software. Right now we just wait until the software is used, the user then finds it doesn't work, and then reports back to us. From there we have to troubleshoot what update caused the problem and then uninstall it. Is there a resource out there that allows you to see what is being broken by the current Windows Updates?

Hello Matthew, Its not that simple. Generally updates do not interfere with applications installed on the systems. However, as you have experienced, they can in some cases. What I would recommend to you is to follow a deployment plan when updating your systems. This deployment plan should include various phases prior to getting updates installed to the general systems. 1) Get on Microsoft's Bulletin to receive update information prior to release.. http://www.microsoft.com/technet/security/current.aspx 2) Create a process to deploy updates that you can repeat every month in the same manner. Updates should be applied to a test system, then a group of "controlled" systems (5-10% of all of your computers), then finally to the rest of your workstations. Your "controlled" systems should inlcude workstations that span the various business units in your organization. The people that use those computers need to be aware of how they should test their applications, and how to report any issues prior to the scheduled date of "general" release. 3) Monitor the deployment. Create reports to know which systems have been patched, which have failed, etc.. 4) Review the process routinely, adjust and continue the cycle. If your orgnization does not have an enterprise class configuration manager system, I would recommend Microsoft's Systems Center Configuration Mananager. Not only can you deploy updates, but you can deploy software, OSs, collect software/hardware inventory, power management (R3) and mobile managment coming soon (SCCM 2010). http://www.microsoft.com/systemcenter/en/us/configuration-manager/cm-overview.aspx Visit: anITKB.com, an IT Knowledge Base.

Hi, There is no official software to monitor what the Windows Updates change or break. You can install update one by one to narrow down the problematic update. There are some third party software which can detect directory changes. Such as: http://www.deventerprise.net/Projects.aspx Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Best Regards, Niki Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.